Mobile apps checklist

Every rule in the mobile apps playbook, by chapter, required rules first. Each links to its own page with how we built it and how to check it. This is a lot to check. An Expert can check it for you.

Store review and listing

• Required MOB-3 Let people delete their account inside the app
• Required MOB-4 Sell digital goods through the store's billing
• Required MOB-5 Verify every store purchase on your server
• Recommended MOB-1 Give reviewers a working demo account
• Recommended MOB-2 Describe every change in the review notes
• Recommended MOB-6 Offer a private sign-in next to social sign-in

Signing and release

• Required MOB-7 Let the store hold the signing key and back up the upload key
• Recommended MOB-8 Sign release builds only in CI
• Recommended MOB-9 Raise the build number on every upload
• Recommended MOB-10 Test every build with internal testers first
• Recommended MOB-11 Release to a share of users first
• Recommended MOB-12 Plan to fix forward

Updates and versions

• Required MOB-13 Keep old app versions working against the API
• Required MOB-18 Sign over-the-air updates and match them to the native build
• Recommended MOB-14 Stop versions you no longer support
• Recommended MOB-15 Build with the SDK the stores require
• Recommended MOB-16 Choose the lowest OS version from your users' data
• Recommended MOB-17 Ship over-the-air updates only within store rules

Data on the device

• Required MOB-19 Keep tokens and keys in the Keychain or Keystore
• Required MOB-20 Ship no secrets in the app package
• Recommended MOB-21 Check that requests come from your app
• Recommended MOB-22 Keep secrets out of device backups
• Recommended MOB-23 Keep personal data out of device logs
• Recommended MOB-24 Encrypt local data that holds personal data
• Recommended MOB-25 Wipe local data at sign-out
• Recommended MOB-26 Queue offline changes and resolve conflicts on the server

Privacy declarations

• Required MOB-27 Fill in the store privacy forms from an SDK list
• Required MOB-29 Ask before any tracking
• Recommended MOB-28 Declare required reason APIs in a privacy manifest
• Recommended MOB-30 Ask for each permission when the feature needs it

Crashes and quality

• Required MOB-34 Test every screen with VoiceOver and TalkBack
• Recommended MOB-31 Upload symbols for every build
• Recommended MOB-32 Stay under the store's crash and freeze limits
• Recommended MOB-33 Keep cold start under a set budget
• Recommended MOB-35 Follow the system text size

Show the badge on your project

When your project passes every Required rule, you can show this badge on your site or in your README. It links to this checklist, so anyone can run the same checks.

<a href="https://agentwranglers.se/playbook/mobile-apps/checklist"><img src="https://agentwranglers.se/badge.svg" alt="Checked against the Agent Wranglers mobile apps playbook" width="214" height="20"></a>

[![Checked against the Agent Wranglers mobile apps playbook](https://agentwranglers.se/badge.svg)](https://agentwranglers.se/playbook/mobile-apps/checklist)